--- title: Where Do AI Agents Fit in CI/CD Pipelines? | daily.dev description: AI agents can be embedded at five key points in CI/CD pipelines: pull request review, build failure triage, test selection and repair, vulnerability patching,... canonical: https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Where Do AI Agents Fit in CI/CD Pipelines? | daily.dev og:description: AI agents can be embedded at five key points in CI/CD pipelines: pull request review, build failure triage, test selection and repair, vulnerability patching,... og:url: https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw og:image: https://api.daily.dev/og/posts/vpq7jfZjw.png og:image:alt: Where Do AI Agents Fit in CI/CD Pipelines? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Where Do AI Agents Fit in CI/CD Pipelines? **[Spacelift](https://daily.dev/sources/spacelift)** · 19 min read · 14 upvotes · 2 comments ## Summary AI agents can be embedded at five key points in CI/CD pipelines: pull request review, build failure triage, test selection and repair, vulnerability patching, and post-deploy verification. Unlike traditional scripted pipelines, agentic CI/CD gives agents a goal rather than a command list, allowing them to reason about runtime state and handle unanticipated cases. The article covers practical implementation patterns (including GitHub Actions YAML with Claude Code), security risks like prompt injection and credential exposure, governance challenges, and a comparison of supporting tools including GitLab Duo, GitHub Copilot, Claude Code, and Snyk. Key guidance: keep agents in a proposal role, use least-privilege credentials, cap token spend, and maintain human approval gates for production deployments. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@allinonetools** · 2 upvotes > This feels like the practical direction for AI in DevOps—assist everywhere, automate carefully. **@rizzdev** · 0 upvotes > Most of these degrade loudly, which is what makes them safe. Test selection does not. A selector that quietly stops picking a path looks exactly like a passing build. ## Similar posts on daily.dev - [How to Use CI as Your Agent Loop](https://daily.dev/posts/how-to-use-ci-as-your-agent-loop-pt7mkmvr1) · Atomic Spin · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops), [#ai-agents](https://daily.dev/tags/ai-agents), [#cicd](https://daily.dev/tags/cicd), [#github-actions](https://daily.dev/tags/github-actions) [View this post on daily.dev](https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Where Do AI Agents Fit in CI/CD Pipelines?","url":"https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw"},"datePublished":"2026-07-30T10:44:21.191Z","dateModified":"2026-07-30T12:19:16.514Z","description":"AI agents can be embedded at five key points in CI/CD pipelines: pull request review, build failure triage, test selection and repair, vulnerability patching,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2f89850fd91a587dde70f7b2faafcebf?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2f89850fd91a587dde70f7b2faafcebf?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Spacelift","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Spacelift","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/422b4004f7b24dc988e5720eca3accfc","url":"https://daily.dev/sources/spacelift"},"commentCount":2,"discussionUrl":"https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":14},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":2}],"keywords":"security,devops,ai-agents,cicd,github-actions","timeRequired":"PT19M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Spacelift","item":"https://daily.dev/sources/spacelift"},{"@type":"ListItem","position":3,"name":"Where Do AI Agents Fit in CI/CD Pipelines?"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw","comment":[{"@type":"Comment","text":"This feels like the practical direction for AI in DevOps—assist everywhere, automate carefully.","datePublished":"2026-08-03T03:06:51.383Z","url":"https://daily.dev/posts/vpq7jfZjw#c-XhA5Od0FP","author":{"@type":"Person","name":"AllInOneTools","url":"https://daily.dev/allinonetools","image":"https://media.daily.dev/image/upload/s--4ZT8QlF0--/f_auto/v1769790028/avatars/avatar_igzBsWloJeaegzm9bQltZ?_a=BAMAMiiu0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2}},{"@type":"Comment","text":"Most of these degrade loudly, which is what makes them safe. Test selection does not. A selector that quietly stops picking a path looks exactly like a passing build.","datePublished":"2026-07-30T11:13:47.037Z","url":"https://daily.dev/posts/vpq7jfZjw#c-A5bn9I8pc","author":{"@type":"Person","name":"Andrew","url":"https://daily.dev/rizzdev","image":"https://media.daily.dev/image/upload/s--35vRfXAA--/f_auto/v1785413727/avatars/avatar_fQ7ttCKtPuu6tDvcgQXv5?_a=BAMAMicg0"}}]} ```